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Abstract 

Let HN denote the problem of determining whether a system of multivariate 
polynomials with integer coefficients has a complex root. It has long been 
known that HN S P ==>- P = NP and, thanks to recent work of Koiran, it is 
now known that the truth of the Generalized Riemann Hypothesis (GRH) 
yields the implication HN0P ==>- P^NP. We show that the assumption of 
GRH in the latter implication can be replaced by either of two more plausible 
hypotheses from analytic number theory. The first is an effective short interval 
Prime Ideal Theorem with explicit dependence on the underlying field, while the 
second can be interpreted as a quantitative statement on the higher moments 
of the zeroes of Dedekind zeta functions. In particular, both assumptions can 
still hold even if GRH is false. We thus obtain a new application of Dedekind 
zero estimates to computational algebraic geometry. Along the way, we also 
apply recent explicit algebraic and analytic estimates, some due to Silberman 
and Sombra, which may be of independent interest. 

1 Introduction and Main Results 

Deciding whether a system of multivariate polynomial equations has a solution is 
arguably the most fundamental problem of algebraic complexity. Over the ring Z/2Z 
this problem defines the famous complexity class NP and is the subject of much 
interest in proof systems theory (see, e.g., [BIKPP96 ). Over the complex numbers 
this problem is a cornerstone of computational algebraic geometry and is the defining 
problem of the complexity class NPc of the recent BSS model over C BCSS98 . Let 
HN denote the problem of determining whether a multivariate system of polynomials 
with integer coefficients has a complex root. It has been known at least since the 
1980's that HN e PSPACE (see, e.g., |( fo,n88| ). and that the special case of two 
univariate polynomials is already NP-hard jPla84j. 

Remark 1 Recall the following containments of complexity classes: 
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an<i i/iai a// these complexity classes consist of decision problems, i.e., problems where 
the answer to any instance is either Yes or No. In particular, the properness of every 
inclusion above is a major open problem, and even the inclusion P C PSPACE is 
not known to be proper \Zac8fk WM88L IBTM \Pap95j . The definitions of the afore- 
mentioned complexity classes are reviewed briefly in Section® o 

Here we use analytic number theory to get a simple, surprisingly fast algorithm for 
HN. Our algorithm is completely different from the usual Grobner basis, resultant, 
or homotopy methods from computational algebraic geometry. Indeed, the latter 
methods result in a complexity bound of at best PSPACE for deciding the existence 
of a complex root (see, e.g., |Can88t fRojOOp , while our algorithm yields a bound of 
AM — the so-called Arthur-Merlin class [BM88J - under either of two plausible 
number-theoretic assumptions: GIPIT and DZH. In particular, an Arthur-Merlin 
bound for HN was known earlier only under the assumption of the Generalized 
Riemann Hypothesis (GRH) [Koi96j (see the next section for its statement), 
while our new hypotheses can both continue to hold even if GRH is false. 

In essence, our approach begins by naturally associating a finite algebraic exten- 
sion K of Q to any polynomial system F. Then, if the prime ideals in the ring of 
integers Ok of K are sufficiently well behaved, we can use a randomized sampling 
trick to relate the existence of complex roots of F to the existence of roots of a mod 
p reduction of F. Our hypotheses GIPIT and DZH (short for Good Short Interval 
Prime Ideal Theorem and Dedekind Zero Hypothesis) are then simply the two 
most convenient statements encoding what sort of quantitative behavior we require 
from the prime ideals of Ok- To arrive quickly at our main results, we postpone the 
exact statements of these hypotheses for the next section. 

Definition 1 Let / 1( . . . , f k e Z[xi, . . . , x n ], F := (/i, ...,/ n ), and let o~(F), the 
sparse size (or bit size) of F, denote the number of bits 1 needed to write down 
the monomial term expansions of all the fi. (So only monomials which appear are 
counted, and we (internally) assume all coefficients and exponents are written in 
binary.) o 

Theorem 1 Following the notation above, suppose either GIPIT or DZH is true. 
T/ien HNgAM. Furthermore, 

GRH^ DZH^ GIPIT =>■ HNgAM [HN0P =^ P^NP], 

and both GIPIT and DZH can hold even if GRH is false. 



1 The sparse size thus obviously extends to integers: aeZ ==> er(a) = l + [log 2 (l + H)]- 
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The very last implication follows easily from the basic facts that AM C p NP 
and P = NP P = P NP = p NpNP |Pap95| . Note also that the implication 
HN G P => P = NP holds unconditionally, thanks to the aforementioned NP- 
hardness of HN |Pla84| . 

The algorithm underlying Theorem ^ is based on the following quantitative result 
relating prime distributions and solvability over the complex numbers and finite fields. 



Theorem 2 Following the notation above, there are positive integers tp, dp, and Cp 
(depending on F) such that the following assertions hold: 

1. F has no complex root ==>- the mod p reduction of F has a root in (Z/pZ) n for 
at most aF primes p. In particular, a(ap) = 0(a(F) 2 ). 

2. F has at least one complex root =^> for all integers t >tp, there is a prime 
p G {t F + 1, . . . , (t + 1) Cf } such that the mod p reduction of F has a root in 
(Z/pZ) n . 

3. We have C F = 2°^ F ^ and t F = 0(1) unconditionally. 

4- If either of DZH or GIPIT are true, then we can assert further that Cp = 
0(a(F) K ) and tp = 0(a(F) K ) for some effectively computable absolute constant 

K>0. 

5. If GRH is true then we can assert even further that Cp = 0(a(F) 2m ) and 
t F = 0(l). 

Note: Throughout this paper, all O-constants and Q-constants are absolute and ef- 
fectively computable, o 

Explicit formulae for tp, ap, and Cp, under the assumption of GRH, were derived 
earlier in |RojOO[ Sec. 6.1.6, Rems. 12 and 13]. Although Assertion (1) was observed 
earlier by Koiran |Koi96l Thm. 5] (following easily from earlier work of Janos Kollar 
Kol88j ). we point out that Assertion (2) appears be new. In particular, the existence 
of a sequence of polynomial growth, interleaving the set of primes p for which the 
mod p reduction of F has a root in (Z/pZ) n , was known earlier only under strong 
restrictions: One either needed to assume GRH |Koi96[ Thm. 1] or use unconditional 
results (e.g., those of |H-B77j ) that would leave tp completely unknown and Cp far 
too large to be algorithmically useful. 

Via a clever use of randomization, it is not hard to derive an AM algorithm for 
HN directly from Theorem |2l assuming GIPIT or DZH. One may then wonder if 
one could dispense with randomness and instead simply check the solvability of F 
over Z/pZ for a number of primes polynomial in o~(F), thus obtaining an algorithm 
in P NP for HN. Unfortunately, the following family of examples shows that such a 
simplification is simply not possible. 

Example 1 [Koi9b\ Thm. 10] For n > 1, consider F defined by the following two 
univariate equations: 

x* n -l = 
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where ir n is the product of the first n prime numbers. Then F clearly has no roots 
in C and o~(F) = 0(n\ogn). (The latter fact follows easily from the Prime Number 
Theorem, stated in Section [T~l\ below.) However, the number of primes p for which the 
mod p reduction of F has a root is at least 2 n , which is clearly exponential in o~{F). 
This abundance of primes follows from the fact (observed by Noam Elkies around 
1996) that the number of prime factors of n^ 1 — 1 is at least 2 n \Koi9b\ Lem. 4J- o 



1.1 Riemann Hypotheses and Related Zeta Functions 

Primordial versions of the connection between analysis and number theory are not 
hard to derive from scratch and have been known since the 19— century. For example, 
letting ((s) := Yl™=i ~r denote the usual Riemann zeta function (for any real 
number s>l), one can easily derive with a bit of calculus [TFOQj pp. 30-32] that 

C(s)= TT r an d thus — ^-j } — — , 

p prime P n=l 

where A is the classical Mangoldt function which sends n to logp or 0, according 
as n = p k for some prime p (and some positive integer k) or not. For a deeper 
connection, recall that n(x) denotes the number of primes (in N) < x and that the 
Prime Number Theorem (PNT) is the asymptotic formula tt(x) ~ for x — > 
oo. Writing p = (3 + 27 for real f3 and 7, recall also that ( admits an analytic 
continuation to the complex plane, sans the point 1, via 



C(p)=2V- 1 sin (^) r(l-p) C (l-p), 



2 

where T is Euler's famous continuous analogue of the factorial function |TF00[ Sec. 
2]. (We'll abuse notation henceforth by letting £ denote the analytic continuation of 
C to C \ {1}.) One should then note that the first proofs of PNT, by Hadamard and 
de la Vallee-Poussin (independently, in 1896), were based essentially on the fact that 
(((3 + ry) has no zeroes on the vertical line 7 = l. 2 

Going to an even deeper connection, the Riemann Hypothesis (RH) (from 
1859) is the following assertion: 

(RH) The only zeroes p = (3 + 27 of ( other than the "trivial" zeroes 
{—2, —4, —6, . . .} are those on the critical line 7 = |- 

In particular, letting tc(x) denote the number of primes p<x, it is known that RH is 

true <^=^> 7r(x) — f* =0(-Jx\ogx) [TF00J. Aside from a myriad of other hitherto 

unprovably sharp statements on the distribution of primes, the truth of RH is also 
known to imply a deterministic polynomial-time algorithm for primality detection 



2 Shikau Ikehara later showed in 1931 that PNT is in fact equivalent to the fact that £ has no 
zeroes on the line 7=1 (the proof is reproduced in DMcK72 ) . 



Mil76j even faster than the recent unconditional algorithm of Agrawal, Kayal, and 



baxena [AKS02. 

Through the last estimate on 7r(x), RH also easily implies that for any fixed e>0, 

1 1 +£ 

there is a C e > such that tt(x + x^ +£ ) — n(x) > C £ x ^ - , for all x sufficiently large. 
However, one can prove lower bounds nearly as good without RH. For example, it is 
known that tt(x + x ' 535 ) — tt(x) > * lo - for all x sufficiently large |BH96j . Preceding 
|IJ79j . results of this flavor were derived via estimates on the sum 



p 



S(x,T):= £ U 

C(p)=0 , p=/3+i 7 H 
0</3<l , M<T 



In particular, since the work of Hoheisel [Hoh30j , it has been known that sufficiently 
good bounds of the form \S(x,T) \ = o(xlog 2 T) yield results such as our last bound; 
independent of RH. Note also that we at least know \S(x,T) \ =0(xlog 2 T) un- 
conditionally |LU771 Lem. 5.4 and Sec. 9] and that under RH we have \S(x,T) \ = 
0(v/ilog 2 T). 

Let us now consider general number fields. GRH can be defined as follows: For 
any finite algebraic extension K of Q, define the Dedekind zeta function via the 
formula (k(s) -=J2 a , where a ranges over all nonzero ideals of Ok, N denotes 
the norm function, and s > 1 BS96J. (So (q = (.) Then, like (, the function (k 
also admits an analytic continuation to C\{1} jL()77j . and GRH is the following 
statement: 

(GRH) The only zeroes p = /3 + i'y of (k other than the "trivial" zeroes 
{—2, —4, —6, . . .} are those on the critical line 7= |. 

In particular, letting tck{x) denote the number of prime ideals p of Ok satisfying 

Np<x, it is known that GRH is true •<=>• hk{ x ) — f% ^ =0 (y/x(n K logx + logd K )), 

where % and 6lk respectively denote the field extension degree [K : Q] and absolute 
value of the discriminant of K over Q (see, e.g., |LU771 Thm. 1.1] and [B~S96j). 
Also, in addition to numerous other important consequences in number theory and 
complexity theory, the truth of GRH implies sub-exponential speed-ups for detecting 
rational points on certain algebraic sets |Roj01|. 

Paralleling the special case K = Q, GRH also easily implies that for any fixed 

e > 0, there is a C e > such that ttk (x + x^ +£ ^j — 7r^(x) > C £ ^^r, for all x > 2. (This 

follows routinely from, say, |L077| Thm. 1.1].) However, trying to do without GRH 
introduces some difficulties: While it is known that one can always find positive 
constants ck, Ck, and depending on K such that ck < 1/2 and itk(% + x 1 ~ CK ) — 
tt k (x) > C K ^r for all x > t K |Sok68t IMit681 IH-B77L IBOOlj . there are no known 
estimates for Ck or tK- In any event, in close analogy to the case of the ordinary 
prime counting function, bounds of this type can be derived by estimating the sum 

S K (x,T):= J2 7- 

( K (p)=0 , p=/3+ij 
0</3<l , |7|<T 
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Let us also note that \Sk(x, T) \ <0(x(\ogdK + Ur + logT) logT) unconditionally 
L077| Lem. 5.4 and Sec. 9], and that under GRH we have \Si({x,T)\<0(\/x(hgdK + + logT) logT). 

We are thus naturally led to DZH and GIPIT. These alternatives to GRH respec- 
tively deal with upper bounds on \Sk(x, T) | and lower bounds on 7Tk(x + y) — 7Tk(x). 

Dedekind Zero Hypothesis (DZH) Following the notation above, there exists an 

l 1 1S>9 

absolute constantR>0 such that \Sk{x,T)\ <x i-oiHi+i°B(nK l °e d K)) K T im+ ( 1+1 ° e ( n K loed K'>'> K 
for all x, T> (1 + \og{n K \ogd K )) R . o 

Good Short Interval Prime Ideal Theorem (GIPIT) Following the notation 
above, there is an absolute constant k > such that 

K K ((£ + ^1.01+(l+Jog(n x Iogd jc ))' 5 j _ nK ^1.01+(l+log(n K logd x )) K j > 1 _j_ _j_ ^(1.01+(l+log(n K logd*))*)^ 

for all x>{\ + \og{n K log oIk)) k ■ o 

Note that DZH and GIPIT become harder to prove as we decrease R and k, and that 
DZH is the stronger assumption (cf. Theorem ^ of the last section). In particular, by 
our preceding discussion, the truth of GRH easily implies that both DZH and GIPIT 
are true for any arbitrarily small positive R and K. 

Remark 2 Some experts have recently expressed the opinion that GRH maybe true 
modulo a small exception: the existence of so-called Landau-Siegel zeroes on the real 
line ' L SZQ^j. Note, however, that the existence of such zeroes does not affect the truth 
of DZH or GIPIT. o 



2 Background and Related Work 

Let us first consider the following recent refined effective arithmetic version of Hilbert's 
Nullstellensatz. 

Note: In what follows, we always normalize n-dimensional volume Vol(-) so that the 
n-dimensional unit cube has volume n\. o 

Theorem 3 ,f^M Thm. 4.IJ Let f u . . . ,f k G Z[x u . . . , x n ], F := (f u ...,f k ), 
D := maxjdeg/j, and let Vp denote the volume of the convex hull of the union 
of {0,ei, ... ,e n } (the origin and the standard basis vectors ofM. n ) and the set of 
all exponent vectors of the monomial term expansion of F. Then F has no roots in 
C n <^=^ there exist polynomials gi, . . . , jj,eZ[si, . . . , x n ) and a positive integer a with 
fi9i + ■ ■ ■ + fk9k = 0'F identically and 

1. deggi<2n 2 DV F 

2. a(a F ) < 2(n + lfDV F {a{F) + log k + U(n + l)D log(T> + 1)) ■ 

This result immediately implies that HN can be solved by solving a linear system 
with 0((2n 2 DVF) n ) variables and equations over the rationals (with total bit-size 
0(a(F)(2n 2 DV F ) n )), thus easily yielding HNgEXPTIME. That HNePSPACE 

3 i.e., smallest convex set containing... 
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then follows immediately from the fact that linear algebra can be efficiently paral- 
lelized |Csa76j . 

Another result we'll need is an effective version of rational univariate reduction 
(a.k.a. effective primitive element theorem). 

Theorem 4 [(See \RojOC\ Thms. 5 and 7])] Following the notation of Theorem^ let 

Z F denote the zero set of F in C". Then there are univariate polynomials hi,.. . ,h n , h F Eli[t] 
and positive integers CLi , . . . , CL n with the following properties: 

1. The number of irreducible components of Z F is bounded above by degh F ; and 
deghi,..., deg h n < deg h F <V F . 

2. For any root 9 of h F we have F (^2, . . . , ^) = O and every irreducible 
component of Z F contains at least one point that can be expressed in this way. 

3. a(a 1 ),a(h 1 )...,a{a n ),a{h r [) = 0(V F a{h F )) and<r(h F ) = 0(V F [<r{F)+nhgD]). ■ 

Sketch of Proof: The proof follows almost exactly the same development as RojOl, 
Sees. 6.1.3 and 6.1.5], except that Theorem 23 there (an estimate on the maximum 
coefficient size of a variant of the toric resultant) is combined with |Som02l Cor. 2.5]. 
This allows us to omit a factor exponential in n that would have otherwise appeared 
in Assertion (3) above. ■ 

For technical reasons, it will be more convenient to work with a weighted variant 
of ttk instead of ttk itself. So let us define i[k{.x) '■= J^logiVp — the natural gen- 
eralization of the Mangoldt A function to prime ideals in algebraic number rings - 
where the sum ranges over all integral ideals of the form p = q m with q an unramified 
prime ideal of Ok arid Nq m < x. The results from analytic number theory we'll need 
can then be summarized as follows. 

Theorem 5 (Unconditional (Weighted) Effective Prime Ideal Theorem) 

For all x,T>2, we have 

I p ^ 

4> K {x) - x- V - + V - 

' p *—* p 

Gf( P )=o , p=p+n v | p |<i v , 

\ 0</3<l , | 7 |<T / 

In particular, for all x > e 10 ~ 22027 and T > e 5 ~ 148.4, we have that the left-hand 
side of the above asymptotic equality is no larger than 

^{hn K log 2 x + 36.55% log x + 375.2% log T + 196.6 log d K + 351%} + (2 log d K + 3.51%) log % + 25 log d K + 283.1%. 

Sketch of Proof: The first portion is nothing more than the special case of |L()77| 
Thm. 7.1] where, in the notation there, K = L and the conjugacy class C of Gal(L/K) 
is just the identity element e. (The sums over zeroes of (k also simplify since there is 
just one underlying character of H = (e) and it is the trivial character.) The second 
portion is a variation of Sil02 4 Thm. 9.1]. (The latter theorem gives a bound on 



-0(^-{n K log 2 x + log d K + n K log T) + (n K + log d K ) log x 



i[>k(x) — x instead, and assumes the truth of GRH.) In particular, by modifying the 
proof to avoid the use of GRH (and employing [Sil02, Lem. 5.8]), the result follows 
easily. ■ 

We then immediately obtain the following corollary. 



7 



Corollary 1 (Unconditional (Weighted) Effective Short Interval Prime Ideal Theorem) 

For all x,y,T> 2, we have 

M x + y)~ i'Ki x )=y - 2^ Ol — (n K log 2 (a; + y) + log 4 + n K log T) + [n K + log 4) log(i + y) . 



T 

C K (p)=0 , H+*7 
0</3<l , H<T 

In particular, for all x,y> e 10 ~ 22027 and T > e 5 ~ 148.4, we have that the equality 
sign above can be replaced by a < sign and the O(-) estimate replaced by the following: 

X -j- {I0n ;f log 2 (2' + y) + lUnMxiy) + 7-50.4n. K log T + 393.2 logd A - + 702n, { } + (41og4 + 7.02%)log(z + y) + 50kg + 566.2n A -. I 

While we won't need the following estimate to prove our main results, we include it 
so the reader can see how the conditional estimates on 7r(x + y) — tt(x) and n K (x + y) — 
ttk{x) from Section fX . XI follow immediately from our unconditional corollary above, 
should GRH turn out to be true. 



Lemma 1 (See \LQ77 Lem. 5.4] and \SiWS\ hem. 5.7 and the Proof of Thm. 9.1]) 
1 

We have — = 0(log 2 T + (n K + \ogdx) logT). In particular, for all 



\P\ 

0</3<l , | 7 |<T 



T >e 5 ^ 148.4, we have V ^- <3.1 log 2 T + (77.1n K + 8 logcM logT. ■ 

\P\ 

Ck{p)=0 , P=f3+il lrl 
0</3<l , | 7 |<T 

The following basic result will help us relate log dx and n K to the bit-size of the 
defining polynomial of K. Recall that the square-free part of a univariate polynomial 
/i, //g. •(!(/. /'). 

Proposition 1 (See \Roj01\ Lemmata 2.1 and 4-1]) Suppose K = Q[xi]/(f) where f 
is the square-free part of some polynomial #£Z[;ri]\Z. Then 

n K <degg and \ogd K = 0((degg)a(g) + (deg/) 2 ). 

More precisely, 

log d K < (2deg 5 - l)(a(g) + (degg + a) log2) + — ^ — log(deg 5 + 1) + -^log((deg ff )(2deg 5 + l)/6). I 

Finally, let us briefly and informally review the complexity classes mentioned 
earlier in the introduction. First, our underlying computational model will be the 
classical Turing machine, which for our purposes can be assumed to be a lap-top 
with infinite memory and a flawless operating system. In particular, bit operations 
(and time) can be identified with the number of clock-cycles used by the underlying 
microprocessor. Input size, for an input such as F, is then simply c(F), and can also 
be interpreted as the amount of memory used by our idealized lap-top to store F. 

Our complexity classes can then be summarized as follows. Note that an oracle 
in A is a special machine which is allowed to run an algorithm with complexity A in 
one unit of time, and all problems below are decision problems. 
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P The family of problems which can be done within time polynomial in the input 



size. 4 



RP The family of problems admitting a polynomial-time algorithm for which a 
' ' Yes ' ' answer is always correct but a "No" answer is wrong with probability 



i 

2' 



coRP The family of problems admitting a polynomial-time algorithm for which a 

' 'No" answer is always correct but a ' 'Yes' ' answer is wrong with probability 
i 

2' 

NP The family of problems where a ' 'Yes' ' answer can be certified within time 
polynomial in the input size. 

coNP The family of problems where a 1 ' No ' ' answer can be certified within time 
polynomial in the input size. 

AM The family of problems solvable by a BPP algorithm which has been augmented 
with exactly one use of an oracle in NP. 

NP NP The family of problems where a 1 'Yes' ' answer can be certified by using an 
NP-oracle a number of times polynomial in the input size. 

coNP NP The family of problems where a ' ' No ' ' answer can be certified by using an 
NP-oracle a number of times polynomial in the input size. 



iNP r 



The family of problems solvable within time polynomial in the input size, with 
as many calls to an NP NP oracle as allowed by the time bound. 



PSPACE The family of problems solvable within time polynomial in the input size, pro- 
vided a number of processors exponential in the input size is allowed. 

EXPTIME The family of problems solvable within time exponential in the input size. 

We note that RP algorithms and BPP algorithms are sometimes respectively 
referred to as Monte-Carlo and Atlantic City algorithms. 



3 Reducing Theorem [T] to Theorem El 

Let us begin with a description of the algorithm which proves Theorem ^ 

Algorithm kamhn 5 

Input A system F of k polynomials in n variables with integer coefficients 

4 Note that the underlying polynomial depends only on the problem, not the particular instance 
of the problem. 

5 Short for Koiran-Arthur-Merlin-Hilbert-Nullstellensatz. A similar algorithm was outlined on 
Page 6 of Koi96 (but not in the journal version of the paper), hence our naming. 
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Output A declaration, correct with probability >| ; of whether F has a complex root or 
not. 

Step Let tp, of, and Cf be the integer constants from Theorem^ 

Step 1 Pick a (uniformly distributed) random integer t G {tp, . . . , tp + 3a p}. 

Step 2 [/sing an NP oracle just once, decide if there is a prime p(z{t c ' F + 1, . . . , (t + 1) F } 
such that the mod p reduction of F has a root in (Z/pZ) n . If so, declare that F 
has a complex root. Otherwise, declare that F has no complex root, o 

The last technical lemma we will need relates short interval bounds between ttk 
and ipK- 

Lemma 2 Suppose /gZ[xi]\Z is square-free and K :=Q[xi}/ (f) . Then, assuming 
x > 1 + log dx and y>0, 

ip K (x + y)- 4>k(x) > f 1 + ~Y-V X + yj log(a; + y) vr^(x + y)- tt k {x + y) > 1 + ^y/x + y. 

Proof: Note that the right-hand bound can be enforced via a similar bound on 
yet another related weighted prime power counting function: First, define 6^(i) := 
J^logiVp where the sum ranges over all unramified prime ideals of Ok of norm <x. 
Since 

®k{x + y) - ®k{x) < (^k(x + y) - tt k (x)) log(x + y), 
the right-hand bound of our lemma is clearly implied by 



(9) e K (x + y )-e K {z)>[i + nK ^+y ) log(x + y). 



Now, 

logiVp = 0(y/x) < ^2 n KX l/k \ogx < n k (logs) ^ a; 1/fc 

(p,m) fc=2 fc=2 

m>2 
iVp m <a; 

< nk(logx)(y/x + x 1 / 3 \og 2 x) < n K (\ogx)(3\/x) = 3nx\/x\ogx. 

So we then clearly have < i[)k( x ) ~ ®k(%) — 3n K y/x\ogx, and it thus suffices to 
enforce 

ip K (x + y) - iPk{x) > ( 1 + J*J1±V) \ g(x + y). 



So we are done. ■ 

Proof of Theorem U Clearly, to prove the first assertion of Theorem ^ it suffices 
to prove that the truth of either DZH or GIPIT implies that the algorithm above is 
correct and runs within AM. We will handle the remaining implications later. 

To see correctness, simply note that Theorem |21 implies that F has no complex 
roots (resp. has at least one complex root) ==>- at most one third (resp. all) of 
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the half-open intervals {[t Cp + 1, (t + l) c ' F )}te{t F ,...,t F +3a F } has (resp. have) a prime 
p such that the mod p reduction of F has a root in (Z/pZ) n . So a declaration 
of ' 'No Complex Roots' ' is always correct, while a declaration of ' 'There is at 
Least One Complex Root' ' is wrong with probability |. So correctness is actually 
independent of DZH or GIPIT or any unproven assumption. 

To see that KAMHN runs in AM, let us now assume either DZH or GIPIT. Note 
then that by Assertion (2) of Theorem |21 no integer computed has bit size larger than 
0(a(F) K+2 ), so a single use of an NP oracle really does suffice to run our algorithm. 
Note also that since k is effectively computable, the constants tp, of, and Cf are all 
computable in polynomial time by recursive squaring. So KAMHN indeed runs in AM. 

We must now prove the remaining assertions. The implications [GRH^=^DZH] 
and [HN G AM =^> [HN P ==>- P 7^ NP]] were already proved during our 
discussion in Sections 1 and 11.11 The same goes for the fact that GIPIT and DZH 
can still hold even if GRH is false. So, thanks to our earlier application of Theorem 
121 we need only prove DZH^=^>GIPIT. 

To prove the last implication, note that DZH implies that 

\S(x c ,x c/2 )\<x C ^~ 1 - 01+ <- 1+ ^k^k)) k ) , f or a ll x > (1 + \og(n K \ogd K ) R . 

So, provided C > 200(1.01 + (1 +\og(n K log d K )) R ) , we obtain that | S(x c , x c/2 ) | < x c ' x 
for all x > (1 + log(n^ log d K ) K . Let us define C a bit larger asymptotically by setting 
C := (1.01 + (1 + \og{n K \ogd K )) K for any k>R. 

Now recall that Cx c ~ l < (x + l) c -x c <C(x + l) c ~\ Corollary[TJ with T: = x c / 2 , 
then yields 

i> K ({x + if) - M* C ) = C{x + if- 1 - o{x c ~ l ) - 0{x l ^{Cn K hi{x + 1) + n K hgx + C{hgd K ) logx)), 

= nix " 1 ) 

where the underlying constants are effectively computable and the implied inequality 
takes effect for all x > (1 + \og{riK log dx)) K for some absolute effectively computable 
k'>0. In particular, by construction C — l> C/2 and we thus obtain 

^ K ((a; + if) - 4j k (x c ) >(l + 7 -^( x + lf/^ \og(x + 1) 

for all x > (1 + \og(n k log dK)) K \ for some absolute effectively computable k" > 0. 
Replacing k by max{ft, k"}, and substituting x + y <— (x + l) c and x <— x° into 
Lemma EJ we are done. ■ 

4 Prime Distribution and Proving Theorem [21 

Proof of Theorem O Assertion (1) follows easily from the following argument 
which has appeared earlier in various incarnations, e.g., |KoiQ6l [HMPSOO] |Ro.jOO| : 
By assumption, Theorem El tells us that the mod p reduction of F has a root in 
(Z/pZ) n => p divides a F . Since the number of prime divisors of an integer a is 
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no more than 1 + log a (since any prime power other than 2 is bounded below by 
e<2. 718281829), an elementary calculation yields Assertion (1). 

The proof of Assertions (2) relies on effective univariate reduction and some den- 
sity estimates for prime ideals. In particular, we will derive Assertion (2) by examining 
the following cleaner abstraction: Let 7Tf(x) denote the number of primes p<x such 
that the mod p reduction of F has a root in (Z/pZ)™. Clearly then, it is enough to 
find sufficiently good upper bounds on y (as a function of x) and tp such that for all 
x>t F , 

(*) TTp(x + y) — 7Tp(x) > 1. 

To do this, we will pass through various reductions, eventually culminating in en- 
forcing a particular lower bound on ttk(% + y) — ttk(%), for some number field K 
depending naturally on F . In particular, GIPIT will immediately imply a lower 
bound good enough to imply Assertion (3), and without GIPIT we can still derive 
the weaker Assertion (4) by employing older theorems on the distribution of prime 
ideals in Ok- (Since Theorem ^contains the implication DZn=^GIPIT, we need not 
worry about assuming DZH any more.) Our framework will then imply Assertion (5) 
almost trivially. 

To start, let hi, . . . , h n , hp G Z[t] and a\, . . . ,a n be the polynomials and integers 
arising from applying Theorem 0] to our input F. Letting / be the square-free part 
of hp, note that p / lcm (ai, . . . ,a n ) and the mod p reduction of / has a root in 
(Z/pZ) n =^> the mod p reduction of F has a root in (Z/pZ) n . So to prove (*) it 
clearly suffices to instead enforce 

(**) N f (x + y) - N f (x)>l, for all x<\ + \ogd K 

where Nf(x) denotes the number of linear factors of the mod p reduction of / 
summed over all primes p<x. In particular, since cr(f) — a(hp) + (Vf + Co) log 2, 
where Co = 2 — < 0.91798 |Roj00t Lemma 5], Theorem |U and Proposition [T] tell 

us that Assertion (2) is true if we can show that we can take y = x l ~ l ^ Cp in (*). 
However, the latter condition was already noted as true in our discussion of uncon- 
ditional lower bounds on tc(x + y) — tt(x) from Section IT~TI Similarly, our discussion 
of GRH-dependent lower bounds immediately implies Assertion (5). Assertion (3) 
then routinely from |L()77| Thm. 1.3], which contains an unconditional version of the 
Prime Ideal Theorem. 

To prove Assertion (4) we must now show GIPIT implies that we can find tp and 
Cp with oitp), o{Cp) = 0(a(f) K ) for some effectively computable absolute constant 
k>0. Letting K :—Q[xi)/ (f), note now that p ydx implies that the mod p reduction 
of / has a linear factor iff p lies below a prime in Ok of residue class degree 1 [L"an94 , 
Ch. I, Sec. 8, Prop. 25, pp. 27-28]. Note also that p (of residue class degree 1) lies 
over p iVp = p. Now let tt k (x) denote the number of unramified primes p of 
Ok with iVp <x and residue class degree 1. It is then clear that |vr^(x) — Nf(x) \ < 
[n K — 1)(1 + \ogd K ) (since the correspondence between factors and primes breaks 
down only for p\Ax) and the left-hand side is constant for all x larger than any 
prime dividing So we can clearly replace (**) by the combined assertions 

(*) n K (x + y)-n K (x)>l 
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and 

(<IM») no prime >tp divides any a 1; . . . , a n or A/. 

We are now ready for our final reduction: Let ttk{x) denote the number of unram- 
ified primes p of Ok with Np < x. Note then that for any prime p of Ok of residue 
class field degree > 2 lying over p, we must have Np > p 2 , which in turn implies 
P < \fi- Since the number of such primes p over p is < uk/2, we must then have 
0<iik(x) — tTk(x) < nK ^ . So it suffices to replace (Jft) by 

(*) 7r K (a; + 2/) -7Ta-(x)>H . 

Via GIPIT, we can then substitute x + y <— (x + l) F and x <— x° F to immediately 
obtain (4*). Taking £p to be the smallest power of 2 larger than (which, by 
Proposition Q and Theorem HI must have size 0(1 + log(n^ logc/A')) 2 )), we can then 
immediately obtain Note in particular that ip can be computed in polynomial 

time by recursive squaring. So we are done. ■ 
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